Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
File: JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft (raw, json)
Hash identifier: F4gABYdEA4vbz/8qGjEv0qL185/X1eBBGVx4LkVJQ68=
Subject key identifier: 08:D6:C9:08:AB:4B:42:8E:04:88:22:3E:06:4D:53:40:74:0C:70:27
Authority key identifier: 24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
Certificate issuer: /CN=241ed58e426975e299875897caff9552640d9c09
Certificate serial: 0196564A7494DA3138CD3112D68C4A33BE48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
Manifest number: 0FDF
Signing time: Mon 21 Apr 2025 03:00:42 +0000
Manifest this update: Mon 21 Apr 2025 03:00:42 +0000
Manifest next update: Tue 22 Apr 2025 03:00:42 +0000
Files and hashes: 1: 0UtAAwuWtglJuf67yxMctPzPq7I.roa (hash: noP3LEoxbmhVQLjGw4L6WYe7t8jyaSHbnOdoEAZKAiw=)
2: JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl (hash: z36I8IrXrItE2GEhGyQyGG3IufBKR6KfdBUMJnhhKKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:74:94:da:31:38:cd:31:12:d6:8c:4a:33:be:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=241ed58e426975e299875897caff9552640d9c09
Validity
Not Before: Apr 21 03:00:42 2025 GMT
Not After : Apr 22 03:00:42 2025 GMT
Subject: CN=08d6c908ab4b428e0488223e064d5340740c7027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:9b:30:10:44:05:f9:dd:15:dc:ac:00:52:
26:d2:f4:0d:79:eb:4e:b6:ed:82:8c:19:b6:76:e8:
41:c3:16:74:52:c4:dd:68:98:82:29:54:a2:29:80:
54:6b:d4:2c:63:d6:7f:66:88:01:85:52:07:f4:8a:
cb:b1:52:9c:52:cc:34:50:d4:f9:82:c7:99:d2:05:
c9:b4:1d:00:7b:2e:15:7b:4f:12:86:20:96:97:ad:
25:6e:5c:2c:a9:d9:02:94:05:99:04:95:7b:26:3e:
44:d5:fb:a2:93:96:ec:e8:98:14:76:d6:a7:8e:5d:
76:9d:c1:bb:f5:5e:e9:ce:07:19:ad:f3:2c:fc:54:
19:93:3d:79:11:73:df:d6:91:b5:77:ad:97:8a:c0:
69:f3:33:84:69:41:da:93:9e:e7:38:12:d0:34:20:
06:5b:40:18:bc:47:4d:e2:75:c4:9c:41:a1:51:fa:
a7:fd:f4:22:fd:2d:c0:29:70:2a:a4:77:d0:70:e4:
4e:18:3c:a5:41:cb:5c:69:c3:6d:2b:66:36:a1:38:
a8:be:3c:0d:0e:75:c8:a0:dc:2c:e8:44:98:84:f1:
b3:c3:93:1f:33:e5:0f:24:00:1c:50:30:12:c0:20:
e5:22:1f:f5:d1:46:39:47:06:e3:8e:07:1f:e6:27:
18:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D6:C9:08:AB:4B:42:8E:04:88:22:3E:06:4D:53:40:74:0C:70:27
X509v3 Authority Key Identifier:
keyid:24:1E:D5:8E:42:69:75:E2:99:87:58:97:CA:FF:95:52:64:0D:9C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JB7VjkJpdeKZh1iXyv-VUmQNnAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f5dc62-be68-4663-84de-5545b8901438/1/JB7VjkJpdeKZh1iXyv-VUmQNnAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:0b:80:75:56:ad:72:cf:fc:91:bd:1f:ec:28:6f:6f:ae:93:
7e:da:99:5c:4c:08:1a:00:1d:8c:ae:e1:a9:ad:87:1b:d2:17:
e8:13:35:a4:d7:d9:53:31:2a:c4:d7:04:eb:d1:13:f8:71:b0:
78:94:7b:d3:73:6c:c3:42:9c:7d:ff:44:a7:9b:f6:b2:93:d1:
fb:c4:0c:ab:14:a2:14:07:aa:ea:5d:98:c0:a5:74:40:42:cd:
09:1f:e4:43:dd:0f:bc:e8:8a:fb:59:87:ee:57:14:52:37:84:
13:ea:98:d5:21:b9:aa:c7:00:51:cc:b8:21:96:d6:1f:5c:77:
08:9e:49:36:0d:a2:93:47:fa:e4:c1:04:95:1f:66:c9:bf:26:
27:01:1f:42:6e:78:cb:0d:5e:bc:3f:c8:4a:1f:e3:23:40:85:
f2:3c:b1:0c:98:82:09:b5:f0:f0:0f:11:0b:c3:72:29:fd:3f:
fc:1e:a1:a5:13:93:4e:3a:a7:86:88:32:12:46:1a:21:30:47:
ed:e1:ac:cf:a4:38:a0:ba:32:c8:76:20:95:8f:a3:a8:1d:db:
51:bb:95:54:52:2a:d7:98:fd:42:7b:e8:4b:b6:67:69:4b:04:
38:d6:49:8f:6c:8d:a3:e0:e8:74:ac:bb:75:29:80:d8:b1:45:
f5:2c:de:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:00:25 2025 by rpki-client